VDB
CISA-2025-43195
CISA-2025-43195
PUBLISHED
CVSS 5.5 MEDIUM
Reported by apple · Published July 29, 2025
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | macOS | unspecified |
| Apple | macOS | unspecified |
| Apple | macOS | unspecified |
| Apple | macOS | unspecified, unspecified, * |
Timeline
- Jul 29, 2025 CVE Published
- Jul 30, 2025 CVE Updated